Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
File: xP8jscNxNS85tz05pOB_jKmMzWc.mft (raw, json)
Hash identifier: 81ov3/czoxxZ5lJsIrg82aYAyIaY0/dbbvRF4hRkTDc=
Subject key identifier: 97:B8:9F:39:EC:F0:93:33:09:C2:04:DE:52:36:13:3F:1C:20:D9:12
Authority key identifier: C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
Certificate issuer: /CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Certificate serial: 0199FCC67EBC14F84B6C32CE4BB7A1958A28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
Manifest number: 1574
Signing time: Sun 19 Oct 2025 14:01:30 +0000
Manifest this update: Sun 19 Oct 2025 14:01:30 +0000
Manifest next update: Mon 20 Oct 2025 14:01:30 +0000
Files and hashes: 1: 5NSYUOXj5LO5RBveLimm0dMK87A.roa (hash: 26b/pGHQTwXlbmbG5ThZm5FqoNcPxzjE+DZsdMKKur0=)
2: Cj0uY_joEUEAfGtiZfe3ZL0PoW0.roa (hash: TH+u6IT5dpk2hfISpLuBXSAh8Mxg3KDgcPA02NCgPeo=)
3: QAdvSCydHA9eyuAMO4zxWjMLaKA.roa (hash: SOXceRa6NpWT+hoKHihDdCbZSJgN5vfd5bbC+z6R+m0=)
4: bYoeFtClejfhTteW6s57MGrpz0M.roa (hash: XiaQPTwLHMkFqSpV5ersN02BOkHiCJtKzXc+PvuUKsk=)
5: mSN_1NgR8_RP_NHRmSVU0520UIo.roa (hash: BRRNK9jtVQ7Ev3axtUha/P9CxSMaCHG6Zn8SMsI5IhM=)
6: vBgsgkwekmg8ZVE8b4TJhK80LrM.roa (hash: c0jtWq7YzOBVoEF72n6cPgI2PZIibyOgb+LV/XfWszE=)
7: xP8jscNxNS85tz05pOB_jKmMzWc.crl (hash: ClzabyKuq81B+SF5343CSeN81A0Ke7ta0r87jS4fWGo=)
8: ymgEz60H5B-ezog8RgufDqIOe4s.roa (hash: M39Qnt8qmV0Mg6aCTITlSwk87VUrTu0U+CVvUs7j6K8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:7e:bc:14:f8:4b:6c:32:ce:4b:b7:a1:95:8a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Validity
Not Before: Oct 19 14:01:30 2025 GMT
Not After : Oct 20 14:01:30 2025 GMT
Subject: CN=97b89f39ecf0933309c204de5236133f1c20d912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d8:a6:d5:fb:f9:d9:48:1f:ee:a3:ed:96:5a:
ca:00:a2:88:47:d6:64:72:55:c4:32:f0:ee:1f:91:
b6:89:5a:45:d8:1b:02:9c:10:5b:d6:be:37:5f:1a:
a9:1e:46:d1:9c:bb:03:17:89:d1:ad:b5:8f:94:40:
3e:6a:25:7a:47:0b:32:da:53:71:90:ab:27:94:d9:
72:75:eb:61:38:65:b1:7a:01:20:a5:c4:4c:91:d4:
f9:df:85:6b:0e:63:d5:3e:a3:2b:43:87:51:05:d2:
99:9f:97:d2:44:e9:db:0b:6f:3e:37:59:e6:13:89:
15:1d:c3:f8:3a:13:be:54:d1:25:2b:39:34:ae:65:
51:16:50:6a:48:85:db:52:3a:ac:5f:44:5f:00:69:
92:ab:5f:0b:2c:2d:e1:55:ec:ce:8a:57:28:14:4b:
5a:1e:e3:de:7c:75:a7:fe:25:1b:0a:8e:92:1b:95:
c2:02:e1:48:58:8b:07:f6:e5:75:1c:bd:cb:63:ed:
f4:54:90:ea:40:c9:90:b5:e7:d6:44:0a:31:fa:ce:
f9:f6:99:27:7f:39:08:0d:b3:07:ae:4f:5f:d9:34:
9b:cd:83:ed:35:cb:2c:31:9b:2b:21:69:7c:0e:9d:
fb:5f:43:39:a8:c6:f2:d3:dd:a4:04:f0:d7:85:c5:
37:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B8:9F:39:EC:F0:93:33:09:C2:04:DE:52:36:13:3F:1C:20:D9:12
X509v3 Authority Key Identifier:
keyid:C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:cd:2a:c9:d0:af:85:4f:43:c1:22:ff:47:dd:bd:c9:f3:7b:
91:76:98:cd:a8:29:d8:fe:35:bf:0a:3e:aa:b0:0a:23:88:50:
4a:5f:e9:3b:5e:78:fd:80:0e:f8:dc:fa:de:12:e3:65:88:c8:
16:de:c4:0b:7e:1f:67:77:6a:05:f9:dd:d0:01:aa:24:9f:4d:
7d:07:cb:a5:9a:78:bc:ab:61:8a:6a:ba:5c:e6:e5:d3:0d:2a:
6c:52:f5:0d:a2:92:c2:e8:94:20:37:8d:61:10:d3:1f:35:d6:
e3:25:34:32:a4:b4:47:af:a8:df:f7:be:35:29:f7:fd:4d:eb:
12:6b:10:65:2f:34:32:f0:ec:96:ee:45:53:9c:c8:00:f5:e5:
51:63:2e:81:b5:27:aa:21:ca:31:44:a5:77:7d:96:f2:ec:6a:
34:26:5d:88:81:cf:e0:5b:91:ec:67:27:81:93:06:59:b5:24:
a2:b5:f5:7e:29:06:02:75:dd:7b:7e:45:0d:4c:99:07:0e:54:
07:65:58:bb:6f:d3:5e:51:ec:19:e8:9b:86:6c:34:de:07:39:
4d:ac:04:9f:a4:8f:52:26:4b:3b:a4:f5:cb:c9:7d:d6:25:6b:
ed:a9:86:12:34:8a:21:80:26:91:31:91:b6:ce:36:0d:99:78:
22:0f:ef:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:03 2025 by rpki-client